- Reliability 9/20
- Evidence: server.json declares a stdio PyPI package claude-real-video 0.10.3; the README documents five MCP tools (watch_video, get_frames, search_memory, list_watched, get_transcript) and claims end-to-end verification on Claude Code. Failure paths are described (missing ffmpeg, faster-whisper fallback to the whisper CLI, clean skip when there is no audio). Deductions: the source snapshot contains only server.json and the README — no CI workflows, no committed tests, no lockfile, and no captured MCP init/tool-list handshake; the 'verified' claim is self-reported and not reviewable. Under the static calibration, reliability is capped at 12 without verifiable execution evidence, so 9.
- Security and permissions 12/20
- Evidence: the README states processing is local, memory lives in a user-only SQLite file (~/.crv/memory.db, overridable via CRV_MEMORY_DB, disable with CRV_NO_MEMORY=1), a non-empty output directory is refused unless --overwrite is passed, and cookies for login-gated sources are user-supplied. Deductions: --cookies-from-browser reads the user's real browser login cookies with no documented confirmation step or scope limit; yt-dlp/ffmpeg fetch arbitrary URLs with no disclosed domain allowlist; install paths from a third-party registry (npx skills add) and a plugin marketplace pull unaudited code; the README leans on paid external links (Capafy, Lemon Squeezy). No malware, covert exfiltration, destructive defaults, or fabricated identity was found, so no red line applies, but permission scoping and confirmation are incomplete: 12.
- Maintenance 13/20
- Evidence: version 0.10.3 shows ongoing iteration; the README records specific fixes (v0.7.4 settled-local channel, v0.7.16 small-subject action channel) and 0.10.x windowing features; MIT license, public repo, and a checkable maintainer identity (Leo Huang / @LeoAidoAI); open issues reported as 0. Deductions: no CHANGELOG, dependency-update policy, SECURITY.md, or security-response channel is present; release cadence and issue response can only be inferred from a version string and README prose since no commit history is included; the boundary between the free tool and the commercial crv Pro is not documented in the files. Active but with governance gaps: 13.
- Documentation 14/20
- Evidence: layered and concrete docs — install extras ([whisper]/[fast]/[speakers]/[mcp]), a three-platform ffmpeg table, a full flag table with defaults and meanings, --from/--to window semantics, the three-channel dedup explanation, a measured performance table (frames/time/estimated tokens), MCP config examples for Claude Code and Claude Desktop, a Python API example, an FAQ, and stated limits (no subtitle burning, self-authorized cookies only, one output folder per video). Deductions: MCP tool parameters and return shapes are only briefly described with no error payloads, pagination edges, or concurrency behavior; the 'verified' claim carries no test evidence; heavy marketing and Pro upsell links reduce signal; tool schemas are not cross-checked against server.json. 14.
- Setup experience 13/20
- Evidence: a short, clear path — pip install 'claude-real-video[mcp]' then claude mcp add crv -- crv-mcp, or a claude_desktop_config.json mcpServers snippet; the non-pip ffmpeg dependency has per-OS commands and a verification step; macOS/Windows/Linux and Python 3.10+ are claimed. Deductions: ffmpeg is not pip-installable and Windows requires manual PATH editing; --speakers needs a 45MB model download and --whisper-model turbo needs a 1.6GB download plus ~6GB memory, and first-run costs are not consolidated in the install section; no containerized or pinned-version path; under the static calibration setup is capped at 15 without CI/tests, so 13.